Exchange Backup Jobs Run Longer Than Expected or Fail with: Contract schema check for the Exchange Online REST API failed

Challenge Exchange backup jobs in Veeam Backup for Microsoft 365 or Veeam Data Cloud for Microsoft 365 run far longer than expected or fail to complete. The job log contains the following warnings and errors: Warning: Failed to retrieve Exchange Online REST API cmdlet information Warning: HTTP...

Microsoft Exchange Server Cross-Site Scripting Vulnerability

Microsoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web Access and when certain interaction conditions are met, arbitrary JavaScript can be executed in the browser context...

CVE-2026-28761

creationtimestamp| type| source ---|---|--- 2026-05-14 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN69128376 2026-05-15 06:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116577063954695291 2026-05-15 07:32:54+00:00| seen|...

CVE-2026-42897

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-8514

creationtimestamp| type| source ---|---|--- 2026-05-14 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260515 2026-05-15 02:23:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116576209608759406 2026-05-15 09:00:15+00:00| seen|...

CVE-2026-42897 Microsoft Exchange Server Spoofing Vulnerability

...

EUVD-2026-30343

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-42897

CVE-2026-42897 affects on-prem Microsoft Exchange Server (2016, 2019, SE) with an XSS flaw in Outlook Web Access caused by improper neutralization of input during web page generation. An attacker could send a crafted email to trigger arbitrary JavaScript execution in the victim’s browser, enablin...

CVE-2026-42897 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2026-42897

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-20210

creationtimestamp| type| source ---|---|--- 2026-05-14 16:24:10+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116573854073506943 2026-06-29 18:16:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3uvzisf2e...

CVE-2026-20209

creationtimestamp| type| source ---|---|--- 2026-05-14 16:24:10+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116573854073506943 2026-06-29 18:21:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph46agk4h2y...

CVE-2026-40067

creationtimestamp| type| source ---|---|--- 2026-05-14 15:49:22+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116573716565807903 2026-05-14 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/f5-products-multiple-vulnerabilities20260515...

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

FamousSparrow Targeted Oil and Gas Industry via MS Exchange Server Exploit

Bitdefender Labs reveals how the China-linked FamousSparrow hacking group targeted an Azerbaijani energy firm using ProxyNotShell, Deed RAT,…...

CVE-2026-20182

creationtimestamp| type| source ---|---|--- 2026-05-14 11:33:33+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-471 2026-05-14 15:45:20+00:00| seen| https://thehackernews.com/2026/05/cisco-catalyst-sd-wan-controller-auth.html 2026-05-14 16:24:10+00:00| seen|...

CVE-2026-44193

creationtimestamp| type| source ---|---|--- 2026-05-14 06:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116571401497715027 2026-05-15 18:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mlvwef2i2a2z...

CVE-2026-45158

creationtimestamp| type| source ---|---|--- 2026-05-14 03:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlrtadfcod2g 2026-05-14 03:02:48+00:00| seen| https://infosec.exchange/users/offseq/statuses/116570693909390630 2026-05-14 04:33:42+00:00| seen|...

CVE-2026-45714

creationtimestamp| type| source ---|---|--- 2026-05-14 00:00:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlrj5qnbnd2e 2026-05-14 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlro7dqd722v 2026-05-14 01:32:49+00:00| seen|...

AMD Processors 安全漏洞

AMD Processors are a series of processors developed by American semiconductor company AMD. There are security vulnerabilities in AMD Processors, which stem from improper permission management. These vulnerabilities could allow attackers to exchange tokens and download sensitive keys, enabling...